Is hontoys.com.au safe?

The scan of hontoys.com.au on 20 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with hontoys.com.au?

1 analysed samples communicate with this URL, including Phishing.

How was hontoys.com.au checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

hontoys.com.au - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned hontoys.com.au and returned a unknown verdict (score 10), categorised as credential-harvest. The page resolved to 221.121.138.69 on SAU NET in AU. 9 domains and 1 IP were contacted, over 46 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 10) · Confidence 13%
Scanned URL: https://www.hontoys.com.au/wp-content/plugins/super-forms/uploads/php/files/27qifp8uspmr0t9dhom7c4ag2c/gukazif.pdf
Domain: hontoys.com.au · IP: 221.121.138.69 · AS45671 · AU
Server: Apache
Page title: Page not found – Hontoys Auto Parts – Sydney Wreckers
HTTP status: 404 · text/html; charset=UTF-8
Registrar: Web Address Registration Pty Ltd
HTTP requests captured: 46
Scan tier: fast · observed 2026-08-20 23:36:55 UTC

Redirect chain

https://www.hontoys.com.au/wp-content/plugins/super-forms/uploads/php/files/27qifp8uspmr0t9dhom7c4ag2c/gukazif.pdf
https://hontoys.com.au/wp-content/plugins/super-forms/uploads/php/files/27qifp8uspmr0t9dhom7c4ag2c/gukazif.pdf

Malware communicating with this URL (1)

These samples were observed contacting or being served from hontoys.com.au. Each links to its full analysis.

Phishing - referenced · 0d3b1ce9f8d3d091c3ef8d4e62fa0f35 · first seen 2026-08-20

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form

Detected technologies

Apache
WordPress
Google Analytics
jQuery
Bootstrap

Contacted infrastructure

221.121.138.69 - AS45671 SAU NET (Australia)

Observed indicators

hontoys.com.au
gmpg.org
www.googletagmanager.com
fonts.googleapis.com
use.fontawesome.com
fonts.gstatic.com
www.facebook.com
www.instagram.com
connect.livechatinc.com
221.121.138.69
https://hontoys.com.au/wp-content/plugins/super-forms/uploads/php/files/27qifp8uspmr0t9dhom7c4ag2c/gukazif.pdf
https://gmpg.org/xfn/11
https://hontoys.com.au/xmlrpc.php
https://www.googletagmanager.com/
https://fonts.googleapis.com/
https://use.fontawesome.com/
https://fonts.gstatic.com/
https://hontoys.com.au/feed/
https://hontoys.com.au/comments/feed/
https://hontoys.com.au/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.10.0

Questions about hontoys.com.au

Is hontoys.com.au safe?: The scan of hontoys.com.au on 20 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with hontoys.com.au?: 1 analysed samples communicate with this URL, including Phishing.
How was hontoys.com.au checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of hontoys.com.au

Scanned on MalwareAnalyzer by Cyble · Open interactive scan